Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: zYTi3UEY1A03xp13Rb9KRnORx5pcx9GqnYnXNP0HMb4=
Subject key identifier: 5A:5D:ED:96:BE:68:FB:2E:B0:E6:EB:08:A9:9C:8A:21:95:BB:4B:1F
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 0197B6D780180B1E384F0EF469D8ADA33C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: cIkK/7CPNy2Y69DnOYoiHgLgG0UrvNvUFhcsIzuYcOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:80:18:0b:1e:38:4f:0e:f4:69:d8:ad:a3:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=5a5ded96be68fb2eb0e6eb08a99c8a2195bb4b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:50:22:c0:1f:3b:4d:08:af:ae:ad:22:35:
11:64:cf:9d:bc:b6:6e:f7:bb:14:4d:9c:e6:4f:c5:
41:6e:5b:74:c8:2f:27:37:38:8c:ec:77:0d:84:e5:
bd:b8:91:37:4d:55:c6:89:b3:88:e1:3b:bf:87:b2:
58:5a:d8:e8:26:d9:95:5f:6f:13:d9:ac:b5:80:04:
5c:21:df:fb:6d:88:9a:63:aa:f0:96:27:ef:13:6a:
b1:92:91:14:6b:42:eb:91:84:09:1a:6a:f0:cb:61:
13:60:7f:f0:39:13:d2:8b:92:5c:2b:b9:bd:25:72:
a8:7b:a0:de:1b:1f:69:fe:10:82:e6:17:07:ec:54:
de:fe:10:40:65:32:eb:49:a6:59:fa:f9:d4:91:44:
e8:f9:ad:83:1d:1d:87:41:51:27:3e:00:c0:35:5e:
08:06:d2:28:60:2b:8e:e6:40:65:0c:41:6f:f6:7d:
03:f6:20:17:49:ff:48:68:18:65:e7:12:44:0b:ca:
3f:96:7b:ac:04:d8:fb:7b:17:8f:69:7f:1f:c8:ec:
22:d9:01:4a:7f:1a:5b:f6:02:73:f6:82:0b:9f:b3:
68:48:77:01:7e:f4:a0:48:61:2a:6d:61:ab:1d:11:
4c:4b:48:f9:2c:4f:dd:20:37:11:9e:3b:cf:e7:b5:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:ED:96:BE:68:FB:2E:B0:E6:EB:08:A9:9C:8A:21:95:BB:4B:1F
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:33:d6:85:1f:40:bd:4c:71:45:f1:0c:19:ad:18:3e:4d:f9:
99:e4:b4:79:a5:a0:fc:c8:dd:7d:43:a7:85:08:be:8c:cf:39:
c0:c4:18:6e:8c:93:6b:76:33:b1:00:dd:7a:75:d5:d5:07:29:
40:a6:a3:35:d8:9f:0d:24:14:37:c5:a5:4a:94:8e:a9:eb:74:
ac:38:35:ca:24:b0:39:d3:20:7b:f1:ae:94:49:d2:f4:06:06:
de:02:a9:38:63:38:8a:a0:4f:ca:16:09:0c:d2:63:00:b7:7a:
23:4b:23:d8:5e:fc:f5:05:3e:46:94:4a:2a:af:72:86:46:24:
e9:42:83:35:16:69:e8:70:f3:d4:43:12:8d:c8:34:1e:80:42:
0e:5d:e2:96:6a:19:d0:36:6b:7a:c7:d3:24:6f:44:04:5d:79:
a0:0d:2f:8d:d7:ff:3f:07:54:e2:6f:76:e4:bb:1a:7b:77:c4:
bf:38:65:a9:d1:a0:2c:a0:a0:20:6b:e6:f0:a2:f8:d9:c4:de:
0d:f4:2a:05:4d:60:23:b3:65:25:c7:96:3a:e0:e2:85:2a:7d:
85:3b:f3:32:d3:ed:58:76:7a:cf:cd:2f:37:c5:e6:07:68:62:
27:24:fa:65:1d:e4:29:75:42:6c:52:ec:fc:b8:77:51:d7:1f:
d3:a8:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:59 2025 by rpki-client